datacatalog-tag-engine icon indicating copy to clipboard operation
datacatalog-tag-engine copied to clipboard

Use direct references rather than interpolated strings for custom roles

Open zefdelgadillo opened this issue 1 year ago • 0 comments

In order for Terraform to apply resources in the correct order, IAM configuration should use the direct attributes from the custom role definition.

See role below:

resource "google_project_iam_binding" "BigQuerySchemaUpdate" {
  project = var.tag_engine_project
  role    = "projects/${var.bigquery_project}/roles/BigQuerySchemaUpdate"**
  members = ["serviceAccount:${var.tag_creator_sa}"]
  depends_on = [google_project_service.tag_engine_project]
}

zefdelgadillo avatar Oct 17 '23 15:10 zefdelgadillo